Fear server

Released 20 years, 10 months ago. August 2004

Copyright © MegaSecurity

By SNiPER


Fear server
Informations
From Germany
Author SNiPER
Family Fear
Category Remote Access
Version Fear server
Released Date Aug 2004, 20 years, 10 months ago.
Language Visual Basic, compressed with UPX
Additional Information
Server:
dropped files:
c:\WINDOWS\ijl10.dll           size: 52.224 bytes 
c:\WINDOWS\wintmp32.tmp.exe    size: 143.359 bytes 
c:\WINDOWS\XSBind.exe          size: 0 bytes 

port: 5231, 5232, 5233, 5234 TCP

added to registry:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableTaskMgr"
data: 1 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "WinLogonApplication32"
data: C:\WINDOWS\WINTMP32.TMP.exe 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "WinLogonApplication32"
data: C:\WINDOWS\WINTMP32.TMP.exe


If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.